INPUTS s0 :: SWord16, existential, aliasing "poly" s1 :: SWord48, aliasing "sent" s2 :: SWord48, aliasing "received" CONSTANTS TABLES ARRAYS UNINTERPRETED CONSTANTS USER GIVEN CODE SEGMENTS AXIOMS DEFINE CONSTRAINTS ASSERTIONS OUTPUTS